Re: Get status of an user account in Tru64

From: Mike Dorn (mrdorn_at_visi.com)
Date: 05/03/04

  • Next message: Eric de Redelijkheid: "Re: Get status of an user account in Tru64" 
    Date: Mon, 03 May 2004 15:30:50 -0500

    Soterro wrote:
    > Hello,
    >
    > I'm interested to know if there's a way to ask for the status of a
    > certain user account from within a script. The machine is not having the
    > trusted features enabled. My question is not related to a specific
    > version of Tru64, I would appreciate something that works since 4.0F or
    > such if possible of course.
    >
    > As far as I noticed, the administrative lock puts a 'Nologin' string in
    > front of the password entry in the passwd file, so this could be a
    > hands-on solution. However I don't know where to look whether the
    > account (and its password) is expired.
    >
    > Is there a command allowing to get the user's status or do I have to
    > parse myself some (which?) configuration files? dxaccounts doesnt say
    > anything about expiration, by the way (and wouldn't be a solution anyway
    > as I can't use it from a script).
    >
    > Thanks a lot,
    > S
    If you aren't using the C2 security features, then there is no such thing as
    password expiration. With base security, there are only 7 fields: username,
    password, userid, groupid, description, home directory and shell. Locking an
    account, as you've noticed, just sticks the word "Nologin" in front of the
    encrypted password. The more sophisticated security fields that are used to
    track password changed dates, expiration, etc., are only available when you use
    the C2 security, and they are stored in a separate database. (Exactly where
    depends on a couple of things, particularly whether or not you're using NIS.)

    If you do use C2, you can get at this data using a script (if you're su), but it
    takes a little parsing with awk to do it.

  • Next message: Eric de Redelijkheid: "Re: Get status of an user account in Tru64"

    Relevant Pages

    • Re: Set Account Expiration Date for group in domain.
      ... I want to have each user from group_3 get disabled his account every 3 ... I think you mean password expiration date rather than account expiration ... applies to all users (if their passwords expire). ... would also have to be done with a script that runs on that day. ...
      (microsoft.public.windows.server.scripting)
    • Re: Set Account Expiration Date for group in domain.
      ... I want to have each user from group_3 get disabled his account every 3 ... An account can have only one expiration date, ... applies to all users (if their passwords expire). ... would also have to be done with a script that runs on that day. ...
      (microsoft.public.windows.server.scripting)
    • Re: Get status of an user account in Tru64
      ... >> certain user account from within a script. ... > thing as password expiration. ... With base security, there are only 7 ... > sophisticated security fields that are used to track password changed ...
      (comp.unix.tru64)
    • Re: Separation and Security
      ... Most account management processes can be handled by script commands. ... open the data file then go Define Accts.. ... This is a bit of a security loop hole since anyone with a password can ...
      (comp.databases.filemaker)
    • Re: Create account with an Expiration Date
      ... the account cannot be used. ... corresponds to the expiration date of the account. ... creating an account with your script and have it expire tomorrow. ... For the disabling of accounts though, I cant have this done manually ...
      (microsoft.public.windows.server.active_directory)